CVE

Id
79999  
CVE No.
CVE-2015-2722  
Status
Candidate  
Description
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.  
Phase
Assigned (20150325)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
724355 79999 CVE-2015-2722 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-65.html  View
724356 79999 CVE-2015-2722 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1166924  View
724357 79999 CVE-2015-2722 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
724358 79999 CVE-2015-2722 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
724359 79999 CVE-2015-2722 GENTOO:GLSA-201512-10  View
724360 79999 CVE-2015-2722 URL:https://security.gentoo.org/glsa/201512-10  View
724361 79999 CVE-2015-2722 REDHAT:RHSA-2015:1207  View
724362 79999 CVE-2015-2722 URL:http://rhn.redhat.com/errata/RHSA-2015-1207.html  View
724363 79999 CVE-2015-2722 SUSE:SUSE-SU-2015:1268  View
724364 79999 CVE-2015-2722 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html  View
724365 79999 CVE-2015-2722 SUSE:SUSE-SU-2015:1269  View
724366 79999 CVE-2015-2722 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html  View
724367 79999 CVE-2015-2722 SUSE:SUSE-SU-2015:1449  View
724368 79999 CVE-2015-2722 URL:http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html  View
724369 79999 CVE-2015-2722 SUSE:openSUSE-SU-2015:1266  View
724370 79999 CVE-2015-2722 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html  View
724371 79999 CVE-2015-2722 SUSE:openSUSE-SU-2015:1229  View
724372 79999 CVE-2015-2722 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html  View
724373 79999 CVE-2015-2722 UBUNTU:USN-2656-1  View
724374 79999 CVE-2015-2722 URL:http://www.ubuntu.com/usn/USN-2656-1  View
724375 79999 CVE-2015-2722 UBUNTU:USN-2656-2  View
724376 79999 CVE-2015-2722 URL:http://www.ubuntu.com/usn/USN-2656-2  View
724377 79999 CVE-2015-2722 BID:75541  View
724378 79999 CVE-2015-2722 URL:http://www.securityfocus.com/bid/75541  View
724379 79999 CVE-2015-2722 SECTRACK:1032783  View
724380 79999 CVE-2015-2722 URL:http://www.securitytracker.com/id/1032783  View
724381 79999 CVE-2015-2722 SECTRACK:1032784  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11709 JVNDB-2015-007029 Erlang/OTP における平文データを取得される脆弱性 Erlang/OTP は、接続終了時に CBC パディングバイトを適切にチェックしないため、平文データを取得される脆弱性が存在します。 CVE-2015-2774 79999 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007029.html  View